77 lines
2.1 KiB
PHP
77 lines
2.1 KiB
PHP
|
<html>
|
||
|
|
<head>
|
||
|
|
<title>Sign Off</title>
|
||
|
|
</head>
|
||
|
|
<body>
|
||
|
|
<?php
|
||
|
|
include("common.php");
|
||
|
|
if (isset($_GET["aircraft-id"]) && $_GET["aircraft-id"] != "" && isset($_GET["email"]) && $_GET["email"] != "")
|
||
|
|
{
|
||
|
|
$con = new mysqli(getenv("SQL_HOST"), getenv("SQL_USER"), getenv("SQL_PASSWORD"), getenv("SQL_DATABASE"), getenv("SQL_PORT"));
|
||
|
|
if ($con->connect_error)
|
||
|
|
{
|
||
|
|
echo("An error occured, please try later</body></html>");
|
||
|
|
exit();
|
||
|
|
}
|
||
|
|
if ($_GET["aircraft-id"] == "all")
|
||
|
|
{
|
||
|
|
$stmt = $con->prepare("SELECT id FROM `aircraft-devs` WHERE user = ?");
|
||
|
|
$stmt->bind_param("s", $_GET["email"]);
|
||
|
|
}
|
||
|
|
else
|
||
|
|
{
|
||
|
|
$stmt = $con->prepare("SELECT id FROM `aircraft-devs` WHERE acid = ? AND user = ?");
|
||
|
|
$stmt->bind_param("ss", $_GET["aircraft-id"], $_GET["email"]);
|
||
|
|
}
|
||
|
|
$stmt->execute();
|
||
|
|
$result = $stmt->get_result();
|
||
|
|
$res = $result->fetch_assoc();
|
||
|
|
$stmt->close();
|
||
|
|
if ($res == Null)
|
||
|
|
{
|
||
|
|
echo("You're not signed up to receive emails for " . $_GET["aircraft-id"]);
|
||
|
|
}
|
||
|
|
else
|
||
|
|
{
|
||
|
|
$hash_unique = false;
|
||
|
|
while (!$hash_unique)
|
||
|
|
{
|
||
|
|
$hash = bin2hex(random_bytes(16));
|
||
|
|
$sql = "SELECT id FROM `confirmation-pending` WHERE id = '" . $hash . "';";
|
||
|
|
$result = $con->query($sql);
|
||
|
|
$res = $result->fetch_assoc();
|
||
|
|
if ($res == Null)
|
||
|
|
{
|
||
|
|
$hash_unique = true;
|
||
|
|
}
|
||
|
|
}
|
||
|
|
$action = new stdClass;
|
||
|
|
$action->action = "signoff";
|
||
|
|
$action->acid = $_GET["aircraft-id"];
|
||
|
|
$action->email = $_GET["email"];
|
||
|
|
|
||
|
|
$stmt = $con->prepare("INSERT INTO `confirmation-pending` (id, action, ts) VALUES (?, ?, NOW())");
|
||
|
|
$stmt->bind_param("ss", $hash, json_encode($action));
|
||
|
|
$stmt->execute();
|
||
|
|
$stmt->close();
|
||
|
|
|
||
|
|
$msg = "You've received this email cause someone requested to sign this
|
||
|
|
email off of the Aircraft Developer Registry at
|
||
|
|
" . getenv("BASE_URL") . "
|
||
|
|
If you have requested this please use the following link to confirm
|
||
|
|
" . getenv("BASE_URL") . "/confirm.php?id=" . $hash . "
|
||
|
|
If you haven't requested to be signed up, please ignore this email.";
|
||
|
|
|
||
|
|
send_mail($_GET["email"], "Sign Off " . $_GET["aircraft-id"], $msg);
|
||
|
|
echo("We've sent you an email. Please confirm your sign off with the link");
|
||
|
|
}
|
||
|
|
$con->close();
|
||
|
|
}
|
||
|
|
else
|
||
|
|
{
|
||
|
|
echo("Invalid request.");
|
||
|
|
}
|
||
|
|
?>
|
||
|
|
</body>
|
||
|
|
</html>
|